CVE & Exploit Intelligence Database

CVE-2024-0107 7.8 HIGH EPSS 0.00

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CWE-125 Aug 08, 2024

CVE-2024-0093 6.5 MEDIUM EPSS 0.00

NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure.

CWE-200 Jun 13, 2024

CVE-2024-0092 5.5 MEDIUM EPSS 0.00

NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service.

CWE-703 Jun 13, 2024

CVE-2024-0091 7.8 HIGH EPSS 0.00

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.

CWE-822 Jun 13, 2024

CVE-2024-0090 7.8 HIGH EPSS 0.00

NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CWE-787 Jun 13, 2024

CVE-2024-0089 7.8 HIGH EPSS 0.00

NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tampering.

CWE-665 Jun 13, 2024

CVE-2024-0086 5.5 MEDIUM EPSS 0.00

NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.

CWE-476 Jun 13, 2024

CVE-2024-0085 6.3 MEDIUM EPSS 0.00

NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service.

CWE-266 Jun 13, 2024

CVE-2024-0084 7.8 HIGH EPSS 0.00

NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileges, and denial of service.

CWE-250 Jun 13, 2024

CVE-2023-31027 8.2 HIGH EPSS 0.00

NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.

CWE-427 Nov 02, 2023

CVE-2023-31026 6.0 MEDIUM EPSS 0.00

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.

CWE-476 Nov 02, 2023

CVE-2023-31023 5.5 MEDIUM EPSS 0.00

NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.

CWE-822 Nov 02, 2023

CVE-2023-31022 5.5 MEDIUM EPSS 0.00

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service.

CWE-476 Nov 02, 2023

CVE-2023-31021 5.5 MEDIUM EPSS 0.00

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.

CWE-476 Nov 02, 2023

CVE-2023-31020 6.1 MEDIUM EPSS 0.00

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.

CWE-284 Nov 02, 2023

CVE-2023-31019 7.8 HIGH EPSS 0.00

NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context.

CWE-284 Nov 02, 2023

CVE-2023-31018 6.5 MEDIUM EPSS 0.00

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.

CWE-476 Nov 02, 2023

CVE-2023-31017 7.8 HIGH EPSS 0.00

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

CWE-552 Nov 02, 2023

CVE-2023-31016 7.3 HIGH EPSS 0.00

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

CWE-427 Nov 02, 2023

CVE-2023-25515 7.8 HIGH EPSS 0.00

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.

CWE-822 Jun 23, 2023